WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 17:57:38 +02:00
Code Issues Packages Projects Releases Wiki Activity
6,455 Commits 80 Branches 17 Tags
a52b26e15cc0e9954ee8a1ee70cd56cfddec2a55
Commit Graph
6455 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mike Auty a52b26e15c Merge branch 'stable' into develop 2026-01-29 21:54:34 +00:00
ikelosandGitHub f54c4db6ef Merge pull request #1935 from volatilityfoundation/release/v2.27.0 
Release/v2.27.0
 2026-01-29 21:28:51 +00:00
Mike Auty d8485fe460 Add arrow support to pyinstaller build v2.27.0 2026-01-29 21:04:51 +00:00
Mike Auty 6b9a6f84c3 Bump year for copyrights to 2026 2026-01-29 20:39:09 +00:00
ikelosandGitHub 0f95d6e44c Merge pull request #1932 from kyrre/feature/multitypedata-repr 
Fix format_hints.MultiTypeData representation in Parquet/Arrow renderers
 2026-01-25 14:01:45 +00:00
kyrre 9949565bd8 use pa.bytes instead of pa.utf8 for format_hints.MultiTypeData 2026-01-14 19:55:43 +01:00
ikelosandGitHub ad1da577e0 Merge pull request #1926 from volatilityfoundation/issues/issue1309 
Avoid trying to lookup child nodes that have been filtered
 2026-01-03 13:52:09 +00:00
ikelosandGitHub ade1cf27d8 Merge pull request #1826 from SolitudePy/linux_procspoof 
process_spoofing plugin
 2025-12-31 21:11:27 +00:00
SolitudePy e8087dd68d Plugins: process_spoofing put reference in docstring 2025-12-31 20:23:05 +02:00
SolitudePy 088a64379c black 2025-12-31 20:13:01 +02:00
SolitudePy 2478c1398e Plugins: get first argument using utility.address_to_string in process_spoofing 2025-12-31 20:06:50 +02:00
ikelosandGitHub 590b5abe89 Merge pull request #1120 from eve-mem/linux_sockscan 
Add linux sockscan plugin
 2025-12-31 15:54:39 +00:00
eve 94f989be7a Linux: update sockscan to add docstring to _find_file_ops_needles 2025-12-31 12:54:41 +00:00
eve 66ec4f4372 Linux: update sockstat docstring for _walk_file_ops_needles. Rename physical_memory_layer_name for clarity 2025-12-31 12:49:45 +00:00
eve 6aa552cd03 Fix black formatting in sockscan 2025-12-31 12:25:22 +00:00
EveGitHubikelos
 		f11347739b Apply suggestions from code review 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:22:48 +00:00
EveGitHubikelos
 		c47ab6ba11 Apply suggestion from @ikelos 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:21:47 +00:00
EveGitHubikelos
 		55c0b9b0a8 Apply suggestion from @ikelos 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:21:32 +00:00
EveGitHubikelos
 		4369935be4 Apply suggestion from @ikelos 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:21:19 +00:00
EveGitHubikelos
 		da6a1e5444 Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:20:57 +00:00
EveGitHubikelos
 		13aa0dd2dc Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:20:44 +00:00
EveGitHubikelos
 		35d24d8d17 Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:20:30 +00:00
EveGitHubikelos
 		4fbd54361a Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:20:20 +00:00
EveGitHubikelos
 		3872133f5d Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:20:09 +00:00
EveGitHubikelos
 		7ba46943bb Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:19:59 +00:00
EveGitHubikelos
 		be11441ef0 Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:19:50 +00:00
EveGitHubikelos
 		c7510f7e00 Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:19:37 +00:00
EveGitHubikelos
 		5205d2cee0 Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:19:08 +00:00
EveGitHubikelos
 		a2e033dfc8 Update volatility3/framework/plugins/linux/sockscan.py 
Co-authored-by: ikelos <ikelos@users.noreply.github.com>
 2025-12-31 12:18:48 +00:00
EveandGitHub aabca91e4b Merge branch 'volatilityfoundation:develop' into linux_sockscan 2025-12-31 11:19:29 +00:00
ikelosandGitHub a7f96b4b25 Merge pull request #1814 from Abyss-W4tcher/vma_enumeration_smearing_protection 
Linux: enhance VMA enumeration smearing protection
 2025-12-31 01:54:38 +00:00
SolitudePy d13de25b46 Constants: add MAX_ARG_STRLEN linux constant 2025-12-31 00:26:09 +02:00
SolitudePy 9c5950e595 Plugins: process_spoofing bump required_framework_version 2025-12-29 19:00:30 +02:00
SolitudePy 4cb326fb6e black and ruff 2025-12-29 19:00:30 +02:00
SolitudePy c3ddc094cb Plugins: process spoofing handle none values and set more classmethods 2025-12-29 19:00:30 +02:00
SolitudePy cbe5b46b8e Plugins: process_spoofing change extract_process_names to classmethod 2025-12-29 19:00:30 +02:00
SolitudePy 1359a11f24 Plugins: truncate deleted to check spoofing in process_spoofing 2025-12-29 19:00:30 +02:00
SolitudePy 9686b5ae8b Plugins: utilize linuxutilities.path_for_file (deleted) logic solely 2025-12-29 19:00:30 +02:00
SolitudePy d384f62721 Plugins: make get_executable_path more accurate in process_spoofing 2025-12-29 19:00:30 +02:00
SolitudePy 41f964cfe1 Plugins: determine process exe deletion structurally 2025-12-29 19:00:30 +02:00
SolitudePy 5c7cf11152 black 2025-12-29 19:00:30 +02:00
SolitudePy d11f50906a Plugins: swap notes for boolean flags in process_spoofing 2025-12-29 19:00:30 +02:00
SolitudePy 1a92e749ff Plugins: more precise exception handling in process_spoofing 2025-12-29 19:00:30 +02:00
SolitudePy 8349479643 Plugins: process_spoofing log exceptions as debug 2025-12-29 19:00:30 +02:00
SolitudePy 939034cd33 Plugins: consistent return values in process_spoofing 2025-12-29 19:00:30 +02:00
SolitudePy cc6aa2117b Plugins: convert useful methods to classmethods 2025-12-29 19:00:30 +02:00
SolitudePy d55cf9a9d0 Plugins: remove exe_file dereference() 2025-12-29 19:00:30 +02:00
SolitudePy 15dc9ec463 Plugins: precise exception handling in process_spoofing 2025-12-29 19:00:30 +02:00
SolitudePy fd270a208d categorize as a malware plugin 2025-12-29 19:00:30 +02:00
SolitudePy 5c3fca3544 added mechanism for deleted exe 2025-12-29 19:00:30 +02:00